Gabriela Zanfir-Fortuna
@gzf.bsky.social
Data Protection Geek. Co-author of the big GDPR OUP Commentary🇷🇴🇪🇺🇺🇸 US-based, former Brussels bubbler. Writes about data protection law and policy, AI governance through a Global lens (& sometimes democracy) Strictly personal views.
www.pdpecho.com.
www.pdpecho.com.
Reposted by Gabriela Zanfir-Fortuna
If you are a resident of California, the state now has a portal where you can demand deletion of your personal data from 500+ registered data brokers with a single request form, for free.
consumer.drop.privacy.ca.gov
consumer.drop.privacy.ca.gov
consumer.drop.privacy.ca.gov
January 2, 2026 at 2:26 AM
If you are a resident of California, the state now has a portal where you can demand deletion of your personal data from 500+ registered data brokers with a single request form, for free.
consumer.drop.privacy.ca.gov
consumer.drop.privacy.ca.gov
Reposted by Gabriela Zanfir-Fortuna
Would you like to join The Economist’s business desk, covering the most important American companies? We’re looking for a US business writer. Find out more and apply here
Wanted: a new business writer
An opportunity to join the staff of The Economist
econ.st
January 1, 2026 at 4:20 PM
Would you like to join The Economist’s business desk, covering the most important American companies? We’re looking for a US business writer. Find out more and apply here
Look what the postman delivered last day of the year ♥️ 📚 One of my biggest wishes for 2026: the time and peace of mind to read for the pleasure of reading.
Happy New Year, friends! May it bring at least some of the things you are most wishing for 🎉
Happy New Year, friends! May it bring at least some of the things you are most wishing for 🎉
December 31, 2025 at 8:31 PM
Look what the postman delivered last day of the year ♥️ 📚 One of my biggest wishes for 2026: the time and peace of mind to read for the pleasure of reading.
Happy New Year, friends! May it bring at least some of the things you are most wishing for 🎉
Happy New Year, friends! May it bring at least some of the things you are most wishing for 🎉
Reposted by Gabriela Zanfir-Fortuna
The Office of the Information and Privacy Commissioner of Canada’s website shows they’re already getting organized for Privacy Week 2026, and honestly, respect that hustle.
December 24, 2025 at 2:08 PM
The Office of the Information and Privacy Commissioner of Canada’s website shows they’re already getting organized for Privacy Week 2026, and honestly, respect that hustle.
💜 the gdpr
With genuine sympathy for folks in the USA, it is nice to live in a country where the answer is a polite "No, GDPR forbids that", with no need to get into a confrontation with any boss.
December 21, 2025 at 3:22 PM
💜 the gdpr
The future doesn’t look that great 🚘 💡
December 21, 2025 at 3:16 PM
The future doesn’t look that great 🚘 💡
Reposted by Gabriela Zanfir-Fortuna
Less than 48 hours after the deadly attack at Sydney's Bondi Beach that left more than a dozen dead, Australian authorities announced proposals for sweeping new gun laws. n.pr/48UTa7g
Australia announces strict new gun laws. Here's how it can act so swiftly
Less than 48 hours after the deadly attack at Sydney's Bondi Beach that left more than a dozen dead, Australian authorities announced proposals for sweeping new gun laws.
n.pr
December 15, 2025 at 9:41 PM
Less than 48 hours after the deadly attack at Sydney's Bondi Beach that left more than a dozen dead, Australian authorities announced proposals for sweeping new gun laws. n.pr/48UTa7g
Reposted by Gabriela Zanfir-Fortuna
Merriam-Webster’s human editors have chosen ‘slop’ as the 2025 Word of the Year.
December 15, 2025 at 2:07 PM
Merriam-Webster’s human editors have chosen ‘slop’ as the 2025 Word of the Year.
A 2-hour documentary investigation by Recorder, an independent, readers’ funded Romanian outlet, shines a light on the deep corruption of the Justice system, metastasized in the past 10 years. It gathered 4 million views in 3 days & ignited protests across the country 1/2
youtu.be/TpUDm4ay-B8?...
youtu.be/TpUDm4ay-B8?...
DOCUMENTAR RECORDER. Justiție capturată
YouTube video by Recorder
youtu.be
December 13, 2025 at 4:26 PM
A 2-hour documentary investigation by Recorder, an independent, readers’ funded Romanian outlet, shines a light on the deep corruption of the Justice system, metastasized in the past 10 years. It gathered 4 million views in 3 days & ignited protests across the country 1/2
youtu.be/TpUDm4ay-B8?...
youtu.be/TpUDm4ay-B8?...
Lol 😆
Amazing, the @dailymail.co.uk manages to publish an entire lengthy feature bewailing (!!!!) the exodus of Poles from Britain without once mentioning Brexit. Apparently this outcome (which is surely exactly what they campaigned for in 2016) is all the fault of Keir Starmer.
mol.im/a/15379789
mol.im/a/15379789
The great exodus: How Poles are ditching UK for their booming homeland
New statistics reveal that while 7,000 Poles arrived in the year ending last June, 25,000 returned home: a net outflow of 18,000. The UK's total Polish population has shrunk to 750,000.
mol.im
December 13, 2025 at 4:01 PM
Lol 😆
Case study for assessing “means reasonably likely to be used” to identify an individual 🤓 This is also for anyone who tells you your cat chip series is not your personal data too 🤠
www.youtube.com/shorts/UcIxF...
www.youtube.com/shorts/UcIxF...
We found this Russian spy -- using her cat #catlady #rusia #funny #truestory
YouTube video by The Christo Files
www.youtube.com
December 8, 2025 at 11:08 PM
Case study for assessing “means reasonably likely to be used” to identify an individual 🤓 This is also for anyone who tells you your cat chip series is not your personal data too 🤠
www.youtube.com/shorts/UcIxF...
www.youtube.com/shorts/UcIxF...
I spent the weekend re-reading the two #SRB judgments and organized my thoughts in a long summary (yes, paradox). Since it might be used to upend the whole data protection system, I think it is imperative to do a minutious study of the Court's findings in SRB 1/x
pdpecho.com/2025/12/08/a...
pdpecho.com/2025/12/08/a...
A deep dive into the consequential SRB judgment(s): Between personal, impersonal, anonymous and pseudonymized data
The CJEU gave two consequential judgments on the definition of “personal data” and its relationship with de-identification, one in first instance by the General Court (Case T-557/20, SRB I, 26 Apri…
pdpecho.com
December 8, 2025 at 2:46 PM
I spent the weekend re-reading the two #SRB judgments and organized my thoughts in a long summary (yes, paradox). Since it might be used to upend the whole data protection system, I think it is imperative to do a minutious study of the Court's findings in SRB 1/x
pdpecho.com/2025/12/08/a...
pdpecho.com/2025/12/08/a...
Reposted by Gabriela Zanfir-Fortuna
As Sweden prepares to spend more on defence, it looks set to open the fiscal taps and issue a flood of new bonds. Stockholm is becoming a bond trader’s paradise as a result
Stockholm is Europe’s new capital of capital
And with Sweden embarking on a borrowing spree, it is a bond trader’s paradise
econ.st
December 7, 2025 at 6:00 AM
As Sweden prepares to spend more on defence, it looks set to open the fiscal taps and issue a flood of new bonds. Stockholm is becoming a bond trader’s paradise as a result
In September, American tech regulator, the FTC, sanctioned a foreign company for not complying with American digital law when providing services to Americans:
www.ftc.gov/news-events/...
www.ftc.gov/news-events/...
FTC Takes Action Against Robot Toy Maker for Allowing Collection of Children’s Data without Parental Consent
The Federal Trade Commission is taking action against robot toy maker Apitor Technology over allegations that its app enabled a third party in China to collect geolocation information from children
www.ftc.gov
December 6, 2025 at 10:22 PM
In September, American tech regulator, the FTC, sanctioned a foreign company for not complying with American digital law when providing services to Americans:
www.ftc.gov/news-events/...
www.ftc.gov/news-events/...
Excellent Saturday morning long read to enjoy with your ☕️ The hollowness of AI speech permeating all written word will end up driving me insane, I know it.
Gift link:
www.nytimes.com/2025/12/03/m...
Gift link:
www.nytimes.com/2025/12/03/m...
Why Does A.I. Write Like … That?
www.nytimes.com
December 6, 2025 at 3:07 PM
Excellent Saturday morning long read to enjoy with your ☕️ The hollowness of AI speech permeating all written word will end up driving me insane, I know it.
Gift link:
www.nytimes.com/2025/12/03/m...
Gift link:
www.nytimes.com/2025/12/03/m...
Hold your horses 🐴 The CJEU itself clarifies that having to comply as an online platform with the #GDPR to prevent unlawful processing of sensitive data *is not* an obligation of general monitoring.
It’s right there in the judgment, spelled out, at para 132.
#Russmedia
It’s right there in the judgment, spelled out, at para 132.
#Russmedia
December 5, 2025 at 9:17 PM
Hold your horses 🐴 The CJEU itself clarifies that having to comply as an online platform with the #GDPR to prevent unlawful processing of sensitive data *is not* an obligation of general monitoring.
It’s right there in the judgment, spelled out, at para 132.
#Russmedia
It’s right there in the judgment, spelled out, at para 132.
#Russmedia
#Russmedia is the gift that keeps on giving. First time the Court states this re: accuracy:
"every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay."
CC: AI developers 👀
"every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay."
CC: AI developers 👀
December 5, 2025 at 6:07 PM
#Russmedia is the gift that keeps on giving. First time the Court states this re: accuracy:
"every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay."
CC: AI developers 👀
"every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay."
CC: AI developers 👀
Reposted by Gabriela Zanfir-Fortuna
I can't use reply to this post, which may be some setting by the original post from @mmasnick.bsky.social
I generally like his writing, not always agree, but he is such great source for the field. In this case, I do hope that people also read other commentary.
I generally like his writing, not always agree, but he is such great source for the field. In this case, I do hope that people also read other commentary.
So if Russmedia starts prescreening for PII and in the process they see but fail to remove obvious counterfeit Prada bags, they still have a safe harbor under Art 7 when Prada sues? Super good question. @hutko.bsky.social? @jvh.bsky.social? @gateklons.bsky.social?
December 5, 2025 at 5:40 PM
I can't use reply to this post, which may be some setting by the original post from @mmasnick.bsky.social
I generally like his writing, not always agree, but he is such great source for the field. In this case, I do hope that people also read other commentary.
I generally like his writing, not always agree, but he is such great source for the field. In this case, I do hope that people also read other commentary.
Reposted by Gabriela Zanfir-Fortuna
Don't let anyone tell you that the Commission's DSA enforcement against X is about speech or censorship.
That would, indeed, be interesting. But this is just the EU enforcing some normal, boring laws that would get bipartisan support in the U.S. (I bet similar bills *have* had that support.) 1/
That would, indeed, be interesting. But this is just the EU enforcing some normal, boring laws that would get bipartisan support in the U.S. (I bet similar bills *have* had that support.) 1/
December 5, 2025 at 2:58 PM
Don't let anyone tell you that the Commission's DSA enforcement against X is about speech or censorship.
That would, indeed, be interesting. But this is just the EU enforcing some normal, boring laws that would get bipartisan support in the U.S. (I bet similar bills *have* had that support.) 1/
That would, indeed, be interesting. But this is just the EU enforcing some normal, boring laws that would get bipartisan support in the U.S. (I bet similar bills *have* had that support.) 1/
Reposted by Gabriela Zanfir-Fortuna
Today’s 120 million euro fine against X under the Digital Services Act (DSA) will be spun as a decision against “free speech.” It’s not. (1/7) #digitalservicesact #dsa #dsa ec.europa.eu/commission/p...
Commission fines X €120 million under the Digital Services Act
Today, the Commission has issued a fine of €120 million to X for breaching its transparency obligations under the Digital Services Act (DSA).
ec.europa.eu
December 5, 2025 at 11:34 AM
Today’s 120 million euro fine against X under the Digital Services Act (DSA) will be spun as a decision against “free speech.” It’s not. (1/7) #digitalservicesact #dsa #dsa ec.europa.eu/commission/p...
The first DSA fine landed - 120 million euro for X is - dare I say - dwarfed by the Irish DPC's 1,3 billion GDPR fine of Meta or Luxembourg DPA's 781 million fine of Amazon. It also comes 2 years after the DSA became applicable. The notion that the Commission is a better, more eficient enforcer 1/2
December 5, 2025 at 2:26 PM
The first DSA fine landed - 120 million euro for X is - dare I say - dwarfed by the Irish DPC's 1,3 billion GDPR fine of Meta or Luxembourg DPA's 781 million fine of Amazon. It also comes 2 years after the DSA became applicable. The notion that the Commission is a better, more eficient enforcer 1/2
There is a press release, but I don't find the full decision of the first DSA fine 🥲 I guess a deep dive will have to wait.
ec.europa.eu/commission/p...
ec.europa.eu/commission/p...
Commission fines X €120 million under the Digital Services Act
Today, the Commission has issued a fine of €120 million to X for breaching its transparency obligations under the Digital Services Act (DSA).
ec.europa.eu
December 5, 2025 at 2:20 PM
There is a press release, but I don't find the full decision of the first DSA fine 🥲 I guess a deep dive will have to wait.
ec.europa.eu/commission/p...
ec.europa.eu/commission/p...
Reposted by Gabriela Zanfir-Fortuna
@gzf.bsky.social from the @futureofprivacy.bsky.social
talks about Europe's role as worldwide leader when it comes to privacy and data protection...and how that role might change as a result of the EU Commission's Digital Omnibus proposal. @monopolyreport.bsky.social podcast at tinyurl.com/5fshds3w
talks about Europe's role as worldwide leader when it comes to privacy and data protection...and how that role might change as a result of the EU Commission's Digital Omnibus proposal. @monopolyreport.bsky.social podcast at tinyurl.com/5fshds3w
December 4, 2025 at 1:23 PM
@gzf.bsky.social from the @futureofprivacy.bsky.social
talks about Europe's role as worldwide leader when it comes to privacy and data protection...and how that role might change as a result of the EU Commission's Digital Omnibus proposal. @monopolyreport.bsky.social podcast at tinyurl.com/5fshds3w
talks about Europe's role as worldwide leader when it comes to privacy and data protection...and how that role might change as a result of the EU Commission's Digital Omnibus proposal. @monopolyreport.bsky.social podcast at tinyurl.com/5fshds3w
So I just started reading Russmedia, the newest GDPR CJEU judgment (published this week), which sent folks in intermediary liability and online safety spinning by acknowledging that online platforms are in fact controllers under the GDPR. Facts of the case: happened in 2018! Just like SRB.‼️
December 4, 2025 at 6:16 AM
So I just started reading Russmedia, the newest GDPR CJEU judgment (published this week), which sent folks in intermediary liability and online safety spinning by acknowledging that online platforms are in fact controllers under the GDPR. Facts of the case: happened in 2018! Just like SRB.‼️
& here is the full episode of the Monopoly Report podcast, in conversation with @achapell.bsky.social, dispelling some of the GDPR Omnibus proposal! I had such a great time talking to Alan, I hope you all enjoy!
#GDPR #GDPROmnibus #Privacy #AdTech
www.monopolyreportpod.com/episode-57-t...
#GDPR #GDPROmnibus #Privacy #AdTech
www.monopolyreportpod.com/episode-57-t...
Episode 57: The EU Digital Omnibus with Dr. Gabriela Zanfir-Fortuna
The Digital Omnibus proposal seeks to upend the EU data protection rules. In part 1 of our coverage, Alan Chapell chats with Dr Gabriela Zanfir-Fortuna of the Futur…
www.monopolyreportpod.com
December 4, 2025 at 4:27 AM
& here is the full episode of the Monopoly Report podcast, in conversation with @achapell.bsky.social, dispelling some of the GDPR Omnibus proposal! I had such a great time talking to Alan, I hope you all enjoy!
#GDPR #GDPROmnibus #Privacy #AdTech
www.monopolyreportpod.com/episode-57-t...
#GDPR #GDPROmnibus #Privacy #AdTech
www.monopolyreportpod.com/episode-57-t...